Security audit
OCT 助手
Security checks across malware telemetry and agentic risk
Overview
This is a short guide for installing and using OCT, with no bundled executable code or hidden instructions, though the linked desktop app can control the computer and should be treated carefully.
Before installing the linked OCT desktop app, verify the GitHub release and publisher, and review any requested file deletion, settings change, Git operation, or terminal command before allowing it to run.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.